Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e20323034313730.roa
File: 3139332e34322e39372e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 62W9TEL5g33azp9OvlrXsOKp/cIaRpYjy9hmLPw9djc=
Subject key identifier: 54:4D:5C:72:FC:A7:F5:B4:7E:76:04:33:60:16:AA:DA:D4:EE:27:29
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 03FD2C497C5B460C784193F584C7B0E5F29A9788
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 25 Jun 2024 21:47:30 +0000
ROA not before: Tue 25 Jun 2024 21:42:30 +0000
ROA not after: Tue 24 Jun 2025 21:47:30 +0000
asID: 204170
IP address blocks: 193.42.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:fd:2c:49:7c:5b:46:0c:78:41:93:f5:84:c7:b0:e5:f2:9a:97:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 25 21:42:30 2024 GMT
Not After : Jun 24 21:47:30 2025 GMT
Subject: CN=544D5C72FCA7F5B47E7604336016AADAD4EE2729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:fe:2a:a6:9b:8c:f9:8c:b6:d2:3c:b5:c3:
3c:22:db:1f:24:69:5d:75:39:2a:80:95:fc:7e:00:
3e:6b:d3:6d:3d:a9:7d:c5:2b:d8:36:bb:ea:33:9f:
26:5b:63:8d:5e:54:cc:15:db:4b:fc:2b:4e:54:85:
87:0f:d4:c0:a1:34:43:09:03:7b:83:c7:38:34:b6:
84:ff:e0:f5:9c:8a:16:b1:6a:d3:74:31:1b:f0:ce:
9c:9e:4d:4a:b7:05:8d:4b:85:82:bf:90:59:8e:65:
bb:2d:6c:9f:cd:06:bf:8d:d4:0f:42:73:8d:21:82:
9c:f4:82:b5:db:7e:68:4e:32:46:74:7e:12:1a:ec:
0e:54:da:6c:2a:79:43:86:86:ea:a1:c8:a7:48:20:
77:9c:3d:2f:02:49:a4:00:68:d0:89:22:40:d9:7f:
7a:45:fe:b5:40:e4:bc:e3:b4:b1:6e:54:7e:08:f8:
ac:5c:55:31:9b:21:15:15:2f:01:c1:83:78:a8:81:
d7:05:3d:10:5a:cb:47:e5:51:2b:e7:71:d3:74:ec:
4a:38:d5:08:f0:1b:98:3d:b7:df:c2:af:90:e1:74:
15:cc:6b:b4:4d:9e:46:ff:28:83:2d:22:82:e5:6d:
31:21:8f:9d:78:7a:89:12:3c:57:07:8d:fb:6b:eb:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:5C:72:FC:A7:F5:B4:7E:76:04:33:60:16:AA:DA:D4:EE:27:29
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.97.0/24
Signature Algorithm: sha256WithRSAEncryption
37:48:64:f1:b8:10:1a:c1:cb:de:63:76:30:27:45:c6:1f:93:
2b:e3:1a:19:39:f9:8d:eb:9f:15:a7:6d:b9:04:a2:0d:c9:a1:
94:6b:44:92:f9:3d:11:97:65:9a:17:65:20:79:41:97:68:eb:
3c:be:c3:c6:c7:9b:01:92:a1:88:9c:98:a2:22:62:b5:b7:63:
16:58:d3:3f:d8:e1:4c:d0:a0:4f:3e:a3:62:57:e7:28:f7:f2:
c9:64:a5:78:e1:71:33:20:1c:c5:85:67:a4:84:37:25:da:26:
20:7a:eb:e3:70:e6:a9:c6:45:d8:b1:27:71:30:0e:81:26:2e:
5f:4a:9a:80:31:89:9e:a1:b3:46:10:0b:42:e7:a3:b1:18:4f:
90:4b:a2:b9:99:1e:ca:ca:08:93:7a:c4:87:5e:4b:eb:a8:66:
d7:5d:0a:fd:50:ae:d3:1a:8d:65:3a:a7:58:84:1d:b6:eb:f7:
e2:b2:d0:08:01:b0:a8:7b:7b:f9:7c:ec:46:6a:ab:83:f5:2e:
1f:0b:cf:ba:29:2f:8e:e6:16:2e:f8:31:18:03:5b:ff:45:c5:
4c:7d:e2:80:4c:cd:60:4c:96:26:fc:51:98:fd:21:80:8a:71:
55:3b:61:5a:67:b3:d3:79:09:a8:32:00:7a:69:53:b3:ea:07:
a6:0c:46:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:44 2024 by rpki-client on console-ams.rpki-client.org